cfg80211_rx_mlme_mgmt(9)
๐ cfg80211_rx_mlme_mgmt โ the Kernel API Manual, bestie edition
okay so picture this: you're in the kernel, you're in station mode, and a management frame just rolled up. This page is cfg80211_rx_mlme_mgmt(9) from the Kernel API Manual, and it's literally the "hey, I handled that frame" notification. Let's get into it ๐
โจ NAME โจ
cfg80211_rx_mlme_mgmt โ the notification that says a processed MLME management frame happened. That's it, that's the vibe ๐
๐ธ SYNOPSIS ๐ธ
void cfg80211_rx_mlme_mgmt (struct net_device *dev , const u8 *buf ,
size_t len );
Look at her go. Three args, no drama โจ
๐ฆ ARGUMENTS ๐ฆ
devโ the network device. the main character of this whole situation ๐bufโ the authentication frame, and yes bestie that means header + body, the whole package ๐lenโ the length of the frame data. how much of the above we're actually talking about ๐
๐ DESCRIPTION ๐
So here's the tea, fr fr. This function gets called whenever an authentication, disassociation, or deauthentication frame has been received and processed in station mode. Like, both things โ received and processed. It's not just "ooh a frame showed up," it's "handled it, moving on" ๐
Now the driver rules, and these are non-negotiable, so pay attention:
- After the driver gets asked to authenticate via
cfg80211_ops::auth, it must call either this function orcfg80211_auth_timeout. pick one, bestie, no ghosting the stack ๐ป - After the driver gets asked to associate via
cfg80211_ops::assoc, it must call either this function orcfg80211_auth_timeout. same deal, same energy ๐ซถ - While connected, the driver must call this for received and processed disassociation and deauthentication frames ๐ก
- If the frame couldn't be used because it was unprotected, the driver must call
cfg80211_rx_unprot_mlme_mgmtinstead. different function, different lane, don't mix them up ๐
โ ๏ธ two things that will absolutely end you if you ignore them: this function may sleep ๐ด and the caller must hold the corresponding wdev's mutex. hold it. the mutex. do not forget the mutex ๐ฅ
โญ that's the whole energy โญ
so to recap the vibe check: dev, buf, len, station mode, auth / disassoc / deauth frames, call it or cfg80211_auth_timeout after cfg80211_ops::auth and cfg80211_ops::assoc, unprotected frames go to cfg80211_rx_unprot_mlme_mgmt instead, it may sleep, hold the wdev's mutex. iconic, no notes ๐
and there's more coming, so don't wander off โ this was just part 1 ๐ง
๐ SEE ALSO, aka the part where this manpage simply refuses to stop ๐
okay bestie, brace yourself โ this section is literally just a giant list of everything even remotely related, and it is iconic in how extra it is. No descriptions, no mercy, just vibes and cross-references. We're gonna get through it together. ๐ซถ
๐ the origin file + the band / capability crew
- Kernel file
./include/net/cfg80211.hโ yeah, this is the header this whole page lives in, it's giving home base โจ Introduction(9)Device registration(9)enum ieee80211_channel_flags(9)struct ieee80211_channel(9)enum ieee80211_rate_flags(9)enum ieee80211_bss_type(9)enum ieee80211_privacy(9)struct ieee80211_rate(9)struct ieee80211_he_obss_pd(9)struct cfg80211_he_bss_color(9)struct ieee80211_sta_ht_cap(9)struct ieee80211_sta_vht_cap(9)struct ieee80211_sta_he_cap(9)struct ieee80211_eht_mcs_nss_supp(9)struct ieee80211_sta_eht_cap(9)struct ieee80211_sta_uhr_cap(9)struct ieee80211_sband_iftype_data(9)enum ieee80211_edmg_bw_config(9)struct ieee80211_edmg(9)struct ieee80211_sta_s1g_cap(9)struct ieee80211_supported_band(9)_ieee80211_set_sband_iftype_data(9)ieee80211_set_sband_iftype_data(9)for_each_sband_iftype_data(9)ieee80211_get_sband_iftype_data(9)ieee80211_get_he_iftype_cap(9)ieee80211_get_he_6ghz_capa(9)ieee80211_get_eht_iftype_cap(9)ieee80211_get_uhr_iftype_cap(9)wiphy_read_of_freq_limits(9)
lowkey that whole block is the "what can this radio even do" zone โ caps, bands, iftype data, the works. ๐
๐ฆ Actions and configuration, and the entire chandef cinematic universe
not me about to list like thirty chandef functions in a row ๐ญ but they're all main characters so:
Actions and configuration(9)struct vif_params(9)struct key_params(9)struct cfg80211_chan_def(9)struct cfg80211_tid_cfg(9)struct cfg80211_tid_config(9)struct cfg80211_fils_aad(9)struct cfg80211_set_hw_timestamp(9)cfg80211_get_chandef_type(9)cfg80211_chandef_create(9)cfg80211_chandef_identical(9)cfg80211_chandef_is_edmg(9)cfg80211_chandef_is_s1g(9)cfg80211_chandef_compatible(9)nl80211_chan_width_to_mhz(9)cfg80211_chandef_get_width(9)cfg80211_chandef_valid(9)cfg80211_chandef_usable(9)cfg80211_chandef_dfs_required(9)cfg80211_chandef_dfs_usable(9)cfg80211_chandef_dfs_cac_time(9)cfg80211_chandef_primary(9)cfg80211_chandef_npca_valid(9)cfg80211_chandef_add_npca(9)cfg80211_chandef_add_dbe(9)nl80211_send_chandef(9)ieee80211_chandef_max_power(9)cfg80211_chandef_s1g_pri_width(9)cfg80211_any_usable_channels(9)
see, told you. chandef nation represent ๐ซก๐ธ
๐ธ beacons, APs, stations, mesh & OCB โ the whole setup squad
enum survey_info_flags(9)struct survey_info(9)struct cfg80211_crypto_settings(9)struct cfg80211_mbssid_config(9)struct cfg80211_mbssid_elems(9)struct cfg80211_rnr_elems(9)struct cfg80211_beacon_data(9)struct cfg80211_acl_data(9)struct cfg80211_fils_discovery(9)struct cfg80211_unsol_bcast_probe_resp(9)struct cfg80211_s1g_short_beacon(9)struct cfg80211_ap_settings(9)struct cfg80211_ap_update(9)struct cfg80211_csa_settings(9)struct cfg80211_color_change_settings(9)struct iface_combination_params(9)enum station_parameters_apply_mask(9)struct sta_txpwr(9)struct link_station_parameters(9)struct link_station_del_parameters(9)struct cfg80211_ttlm_params(9)struct station_parameters(9)struct station_del_parameters(9)enum cfg80211_station_type(9)cfg80211_check_station_change(9)enum rate_info_flags(9)enum rate_info_bw(9)struct rate_info(9)enum bss_param_flags(9)struct sta_bss_parameters(9)struct cfg80211_txq_stats(9)struct cfg80211_tid_stats(9)struct link_station_info(9)struct station_info(9)struct cfg80211_sar_sub_specs(9)struct cfg80211_sar_specs(9)struct cfg80211_sar_freq_ranges(9)struct cfg80211_sar_capa(9)cfg80211_get_station(9)enum monitor_flags(9)enum mpath_info_flags(9)struct mpath_info(9)enum wiphy_bss_param_flags(9)struct bss_parameters(9)struct mesh_config(9)struct mesh_setup(9)struct ocb_setup(9)struct ieee80211_txq_params(9)
the way this section goes from beacon data straight to mesh config to OCB without even blinking ๐ญ ate, honestly.
๐ Scanning and BSS list handling (plus auth / assoc / connect / wowlan in the same breath)
Scanning and BSS list handling(9)struct cfg80211_ssid(9)struct cfg80211_scan_info(9)struct cfg80211_scan_6ghz_params(9)struct cfg80211_scan_request(9)struct cfg80211_match_set(9)struct cfg80211_sched_scan_plan(9)struct cfg80211_bss_select_adjust(9)struct cfg80211_sched_scan_request(9)enum cfg80211_signal_type(9)struct cfg80211_inform_bss(9)struct cfg80211_bss_ies(9)struct cfg80211_bss(9)ieee80211_bss_get_elem(9)ieee80211_bss_get_ie(9)struct cfg80211_auth_request(9)struct cfg80211_assoc_link(9)struct cfg80211_ml_reconf_req(9)enum cfg80211_assoc_req_flags(9)struct cfg80211_assoc_request(9)struct cfg80211_deauth_request(9)struct cfg80211_disassoc_request(9)struct cfg80211_ibss_params(9)struct cfg80211_bss_selection(9)struct cfg80211_connect_params(9)enum cfg80211_connect_params_changed(9)enum wiphy_params_flags(9)struct cfg80211_pmksa(9)struct cfg80211_pkt_pattern(9)struct cfg80211_wowlan_tcp(9)struct cfg80211_wowlan(9)struct cfg80211_coalesce_rules(9)struct cfg80211_coalesce(9)struct cfg80211_wowlan_nd_match(9)struct cfg80211_wowlan_nd_info(9)struct cfg80211_wowlan_wakeup(9)struct cfg80211_gtk_rekey_data(9)struct cfg80211_update_ft_ies_params(9)struct cfg80211_mgmt_tx_params(9)struct cfg80211_dscp_exception(9)struct cfg80211_dscp_range(9)struct cfg80211_qos_map(9)
scan request โ assoc request โ wowlan patterns โ QoS map. the pipeline is pipelining โจ
๐ง NAN, FTM, PMSR, OWE & the fancy-stuff roster
Neighbor Awareness Networking (NAN)(9)struct cfg80211_nan_band_config(9)struct cfg80211_nan_conf(9)struct cfg80211_nan_channel(9)struct cfg80211_nan_local_sched(9)struct cfg80211_nan_peer_map(9)struct cfg80211_nan_peer_sched(9)enum cfg80211_nan_conf_changes(9)struct cfg80211_nan_func_filter(9)struct cfg80211_nan_func(9)struct cfg80211_pmk_conf(9)struct cfg80211_external_auth_params(9)struct cfg80211_ftm_responder_stats(9)struct cfg80211_pmsr_ftm_result(9)struct cfg80211_pmsr_result(9)struct cfg80211_pmsr_ftm_request_peer(9)struct cfg80211_pmsr_request_peer(9)struct cfg80211_pmsr_request(9)struct cfg80211_update_owe_info(9)struct mgmt_frame_regs(9)
NAN block is giving "I know what that stands for and I'm not explaining it" energy, and honestly? valid ๐ง๐
๐ the wiphy + wdev hall of fame
this chunk is so long it deserves its own red carpet:
struct cfg80211_ops(9)enum wiphy_flags(9)struct ieee80211_iface_limit(9)struct ieee80211_iface_combination(9)enum wiphy_wowlan_support_flags(9)struct wiphy_wowlan_support(9)struct wiphy_coalesce_support(9)enum wiphy_vendor_command_flags(9)enum wiphy_opmode_flag(9)struct sta_opmode_info(9)struct wiphy_vendor_command(9)struct wiphy_iftype_ext_capab(9)cfg80211_get_iftype_ext_capa(9)struct cfg80211_pmsr_capabilities(9)struct wiphy_iftype_akm_suites(9)struct wiphy_radio_cfg(9)struct wiphy_radio_freq_range(9)struct wiphy_radio(9)enum wiphy_nan_flags(9)struct wiphy_nan_capa(9)struct wiphy(9)wiphy_priv(9)priv_to_wiphy(9)set_wiphy_dev(9)wiphy_dev(9)wiphy_name(9)wiphy_new_nm(9)wiphy_new(9)wiphy_register(9)rcu_dereference_wiphy(9)wiphy_dereference(9)get_wiphy_regdom(9)wiphy_unregister(9)wiphy_free(9)wiphy_lock(9)wiphy_unlock(9)wiphy_work_queue(9)wiphy_work_cancel(9)wiphy_work_flush(9)wiphy_delayed_work_queue(9)wiphy_delayed_work_cancel(9)wiphy_delayed_work_flush(9)wiphy_delayed_work_pending(9)wiphy_hrtimer_work_queue(9)wiphy_hrtimer_work_cancel(9)wiphy_hrtimer_work_flush(9)wiphy_hrtimer_work_pending(9)enum ieee80211_ap_reg_power(9)struct wireless_dev(9)wdev_priv(9)wdev_chandef(9)
wiphy_new โ wiphy_register โ do the thing โ wiphy_unregister โ wiphy_free. the whole life cycle is RIGHT THERE and it's gorgeous ๐ญ๐
โญ Utility functions + Data path helpers
Utility functions(9)ieee80211_channel_equal(9)ieee80211_channel_to_khz(9)ieee80211_channel_to_freq_khz(9)ieee80211_channel_to_frequency(9)ieee80211_freq_khz_to_channel(9)ieee80211_frequency_to_channel(9)ieee80211_get_channel_khz(9)ieee80211_get_channel(9)cfg80211_channel_is_psc(9)ieee80211_radio_freq_range_valid(9)cfg80211_radio_chandef_valid(9)cfg80211_wdev_channel_allowed(9)ieee80211_get_response_rate(9)ieee80211_mandatory_rates(9)struct ieee80211_radiotap_iterator(9)ieee80211_get_hdrlen_from_skb(9)ieee80211_hdrlen(9)ieee80211_get_mesh_hdrlen(9)Data path helpers(9)ieee80211_data_to_8023_exthdr(9)ieee80211_data_to_8023(9)ieee80211_is_valid_amsdu(9)ieee80211_amsdu_to_8023s(9)ieee80211_get_8023_tunnel_proto(9)ieee80211_strip_8023_mesh_hdr(9)cfg80211_classify8021d(9)cfg80211_find_elem_match(9)cfg80211_find_ie_match(9)cfg80211_find_elem(9)cfg80211_find_ie(9)cfg80211_find_ext_elem(9)cfg80211_find_ext_ie(9)cfg80211_find_vendor_elem(9)cfg80211_find_vendor_ie(9)enum cfg80211_rnr_iter_ret(9)cfg80211_iter_rnr(9)cfg80211_defragment_element(9)cfg80211_send_layer2_update(9)
find_ie / find_elem / find_ext / find_vendorโฆ the way there's a finder for literally every situation is so my brand ๐
๐ Regulatory enforcement infrastructure + Internal regulatory db functions
Regulatory enforcement infrastructure(9)regulatory_hint(9)regulatory_set_wiphy_regd(9)regulatory_set_wiphy_regd_sync(9)wiphy_apply_custom_regulatory(9)freq_reg_info(9)reg_initiator_name(9)regulatory_pre_cac_allowed(9)Internal regulatory db functions(9)reg_query_regdb_wmm(9)
the regulatory db stays mysterious on purpose and we respect that ๐
๐ฅ scan done, BSS inform & the mlme-mgmt friends
heads up bestie: cfg80211_rx_mlme_mgmt(9) itself is not in this list, but these are its whole friend group, so ๐
cfg80211_scan_done(9)cfg80211_sched_scan_results(9)cfg80211_sched_scan_stopped(9)cfg80211_sched_scan_stopped_locked(9)cfg80211_inform_bss_frame_data(9)cfg80211_gen_new_bssid(9)cfg80211_is_element_inherited(9)cfg80211_merge_profile(9)enum cfg80211_bss_frame_type(9)cfg80211_get_ies_channel_number(9)cfg80211_ssid_eq(9)cfg80211_inform_bss_data(9)__cfg80211_get_bss(9)cfg80211_get_bss(9)cfg80211_ref_bss(9)cfg80211_put_bss(9)cfg80211_unlink_bss(9)cfg80211_bss_iter(9)cfg80211_auth_timeout(9)struct cfg80211_rx_assoc_resp_data(9)cfg80211_rx_assoc_resp(9)struct cfg80211_assoc_failure(9)cfg80211_assoc_failure(9)cfg80211_tx_mlme_mgmt(9)cfg80211_rx_unprot_mlme_mgmt(9)cfg80211_michael_mic_failure(9)cfg80211_ibss_joined(9)cfg80211_notify_new_peer_candidate(9)
cfg80211_tx_mlme_mgmt and cfg80211_rx_unprot_mlme_mgmt sitting right here next to the page you're reading โ the siblings said hi ๐ฅ
๐ RFkill, Vendor commands, Test mode
RFkill integration(9)wiphy_rfkill_set_hw_state_reason(9)wiphy_rfkill_start_polling(9)wiphy_rfkill_stop_polling(9)Vendor commands(9)cfg80211_vendor_cmd_alloc_reply_skb(9)cfg80211_vendor_cmd_reply(9)cfg80211_vendor_cmd_get_sender(9)cfg80211_vendor_event_alloc(9)cfg80211_vendor_event_alloc_ucast(9)cfg80211_vendor_event(9)Test mode(9)cfg80211_testmode_alloc_reply_skb(9)cfg80211_testmode_reply(9)cfg80211_testmode_alloc_event_skb(9)cfg80211_testmode_event(9)
alloc skb โ fill it โ reply. alloc skb โ fill it โ event. the pattern is pattern-ing ๐
๐ the connect / roam / notify finale
struct cfg80211_fils_resp_params(9)struct cfg80211_connect_resp_params(9)cfg80211_connect_done(9)cfg80211_connect_bss(9)cfg80211_connect_result(9)cfg80211_connect_timeout(9)struct cfg80211_roam_info(9)cfg80211_roamed(9)cfg80211_port_authorized(9)cfg80211_disconnected(9)cfg80211_ready_on_channel(9)cfg80211_remain_on_channel_expired(9)cfg80211_tx_mgmt_expired(9)cfg80211_sinfo_alloc_tid_stats(9)cfg80211_link_sinfo_alloc_tid_stats(9)cfg80211_sinfo_release_content(9)cfg80211_new_sta(9)cfg80211_del_sta_sinfo(9)cfg80211_del_sta(9)cfg80211_conn_failed(9)struct cfg80211_rx_info(9)cfg80211_rx_mgmt_ext(9)cfg80211_rx_mgmt_khz(9)cfg80211_rx_mgmt(9)struct cfg80211_tx_status(9)cfg80211_mgmt_tx_status_ext(9)cfg80211_mgmt_tx_status(9)cfg80211_control_port_tx_status(9)cfg80211_rx_control_port(9)cfg80211_cqm_rssi_notify(9)cfg80211_cqm_pktloss_notify(9)cfg80211_cqm_txe_notify(9)cfg80211_cqm_beacon_loss_notify(9)__cfg80211_radar_event(9)cfg80211_sta_opmode_change_notify(9)cfg80211_cac_event(9)cfg80211_background_cac_abort(9)cfg80211_gtk_rekey_notify(9)cfg80211_pmksa_candidate_notify(9)cfg80211_rx_spurious_frame(9)cfg80211_rx_unexpected_4addr_frame(9)cfg80211_probe_status(9)cfg80211_report_obss_beacon_khz(9)cfg80211_report_obss_beacon(9)struct cfg80211_beaconing_check_config(9)
and that's exactly where this part of the list cuts off โ there's still more coming, so don't go anywhere bestie ๐ซถโจ
okay so the cross-reference rabbit hole continues and honestly it's a whole friend group, here's the rest of the crew ๐
cfg80211_reg_check_beaconing(9)โ the beaconing vibe check โจcfg80211_reg_can_beacon(9)โ can we beacon or not, asking for a friendcfg80211_reg_can_beacon_relax(9)โ same question but the chill versioncfg80211_ch_switch_notify(9)โ channel switch announcement, go tell everyone ๐ฃcfg80211_ch_switch_started_notify(9)โ and this one's the "we started" textieee80211_operating_class_to_band(9)โ operating class in, band outieee80211_operating_class_to_chandef(9)โ operating class in, chandef outieee80211_chandef_to_operating_class(9)โ the reverse glow-up โจieee80211_chandef_to_khz(9)โ chandef to kHz, math bestiecfg80211_tdls_oper_request(9)โ TDLS operations knocking at your doorcfg80211_calculate_bitrate(9)โ crunching the bitrate numbers ๐งฎcfg80211_unregister_wdev(9)โ bye-bye wireless devicecfg80211_register_netdevice(9)โ hiii netdevice, welcome in ๐ซถcfg80211_unregister_netdevice(9)โ and the goodbye that matchesstruct cfg80211_ft_event_params(9)โ the struct holding FT event paramscfg80211_ft_event(9)โ fast transition event, iconiccfg80211_get_p2p_attr(9)โ grabbing a P2P attributeieee80211_ie_split_ric(9)โ splitting IEs with RIC in the mixieee80211_ie_split(9)โ the plain IE split, no extra toppingsieee80211_fragment_element(9)โ chopping an element into fragments ๐cfg80211_report_wowlan_wakeup(9)โ WoWLAN wakeup reporting, literally waking upcfg80211_crit_proto_stopped(9)โ critical protocol said stop โieee80211_get_num_supported_channels(9)โ headcount for supported channelscfg80211_check_combinations(9)โ combination checking szncfg80211_iter_combinations(9)โ same energy but iteratingcfg80211_get_radio_idx_by_chan(9)โ which radio owns this channel, detective work ๐cfg80211_stop_link(9)โ stopping a link, respectfullycfg80211_stop_iface(9)โ stopping an interface, also respectfullycfg80211_shutdown_all_interfaces(9)โ okay everybody out, full shutdown ๐wiphy_ext_feature_set(9)โ setting an extended feature flagwiphy_ext_feature_isset(9)โ is that extended feature set tho? ๐cfg80211_free_nan_func(9)โ freeing a NAN functionstruct cfg80211_nan_match_params(9)โ the struct for NAN match paramscfg80211_nan_match(9)โ NAN match, we love a coincidence ๐ธcfg80211_nan_func_terminated(9)โ the NAN function said its goodbyescfg80211_nan_sched_update_done(9)โ NAN schedule update, done and dustedcfg80211_external_auth_request(9)โ external auth request, very main charactercfg80211_pmsr_report(9)โ PMSR report incoming ๐จcfg80211_pmsr_complete(9)โ PMSR complete, wrap it upcfg80211_iftype_allowed(9)โ is this interface type allowed? vibe check ๐ฆcfg80211_assoc_comeback(9)โ the association comeback, no capcfg80211_update_owe_info_event(9)โ OWE info event updatecfg80211_bss_flush(9)โ flushing the BSS entries, spring cleaning ๐งนcfg80211_bss_color_notify(9)โ BSS color notification ๐จcfg80211_obss_color_collision_notify(9)โ OBSS color collision, drama detected ๐ญcfg80211_color_change_started_notify(9)โ color change started, we're going incfg80211_color_change_aborted_notify(9)โ color change aborted, never mind ๐cfg80211_color_change_notify(9)โ the plain color change notificationcfg80211_6ghz_power_type(9)โ 6 GHz power type, serving spectrum realness โกcfg80211_links_removed(9)โ links removed, and we're sad about itstruct cfg80211_mlo_reconf_done_data(9)โ the struct for MLO reconfig done datacfg80211_mlo_reconf_add_done(9)โ MLO reconfig add finished โcfg80211_schedule_channels_check(9)โ scheduling a channels check ๐๏ธcfg80211_epcs_changed(9)โ EPCS changed, notedcfg80211_next_nan_dw_notif(9)โ next NAN discovery window notificationcfg80211_nan_cluster_joined(9)โ joined a NAN cluster, squad assembled ๐cfg80211_nan_ulw_update(9)โ NAN ULW updatecfg80211_nan_channel_evac(9)โ NAN channel evacuation, everybody move ๐wiphy_locked_debugfs_read(9)โ locked debugfs read ๐wiphy_locked_debugfs_write(9)โ locked debugfs write, the siblingcfg80211_s1g_get_start_freq_khz(9)โ S1G start frequency in kHzcfg80211_s1g_get_end_freq_khz(9)โ S1G end frequency in kHzcfg80211_s1g_get_primary_sibling(9)โ S1G primary sibling, family reunion ๐ซcfg80211_incumbent_signal_notify(9)โ incumbent signal notification, the final boss of this list
and that's the whole page bestie, you made it to the end ๐๐ซถ go forth and call cfg80211_rx_mlme_mgmt(9) with confidence, you absolute icon.
this one lives in ./include/net (that's the source/version, mwah ๐), dated October 2026, and the page itself is cfg80211_rx_mlme_mgmt(9) โ screenshot it, cite it, live by it. periodt. ๐
โจ
๐ฆ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- ๐ girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms